Data Subject Access Requests

Data Subject Access Requests

Under Article 15 of GDPR, an individual has the right to ask an organisation for copies of any personal data held about him or herself, whether in paper or IT systems. This procedure is called a GDPR Subject Access Request (SAR). In GDPR terminology, the Data Subject is the individual about whom personal data may be held.

An individual may only submit a SAR for him or herself. Proof of identity from the individual is required. A third-party, such as a lawyer, may submit a SAR on behalf of a client, subject to the written consent of the client/individual. GDPR lays down a strict one month timescale for a response to a SAR.

To access your personal data, please complete the GDPR SAR Request Webform‌, including the necessary proof of identification. If you have any questions please contact the DP & FOI Office.